This is something new that I decidced to try out. Using an AI chatbot to generate a base configuration for Linux, Cisco, Arista etc. I do not know all of the Cisco commands for every feature, nor do I have the ability to memorise all the Python functions or Linix configuration. I use Google to […]
Using ChatGPT to Generate Config Read More »
In the previous XMPP post, I was using local users in the XMPP ejabberd server. There was command authorisation in the form of a setting on the XMPP configuration of each Arista switch. The default is 1, however this will not permit show run, or configuration commands and others. This post will explain how to
Using ISE AAA TACACS For Arista XMPP Read More »
Now that the XMPP server and switches have been configured, commands can now be issued from an XMPP client either on the switch or a client running in Linux, Windows, etc.This post will demonstrate the issuing of commands from the IM client Gajim and the Arista switches themselves using XMPP. By default, when configuring the
Arista XMPP Sending Commands Read More »
Extensible Messaging and Presence Protocol is an open standard protocol for instant messaging. Arista switches can use this protocol as a way to configure multiple switches with the same configuration at the same time. Arista switches can even be grouped, so all spine switches, or all leaf switches, or switches in a certain location, etc.
Arista XMPP Configuration Read More »
As part of a lab for Arista, I have created a DHCP server on the Checkpoint firewall. This is specifically to get DHCP options 66 and 67 to the Arista switch for Zero Touch Provisioning (ZTP). DHCP option 66 and 67 direct devices to download configuration.Option 66: provides a TFTP address. This would be the
Checkpoint Enable DHCP Server and DHCP Options 66, 67 Read More »
Zero Touch Provisioning is a way for Arista switches to get a configuration file via DHCP options and configure itself with no interaction from an admin. All there is to do is connect up the switch and IP/config will be applied to the switch.ZTP will only run when there is no startup-config file, so first
Arista Zero Touch Provisioning (ZTP) Read More »
As ISE is using an API, Python can be used to interact with the API. This allows the use of programmatic logic to create, read, update or delete ISE elements. Basic GET I have created a simple GET that will just print the dACLs that ISE has. This is exactly the same API request and
ISE Lab: API 5 – Using Python Read More »
This post will find the details of an endpoint off the MAC address, and then see all the endpoints in a certain group.The API doesn’t seem to be able to search for an endpoint by IP address, as can be done in the GUI. Maybe it can, but with another API. The device that will
ISE Lab: API 4 – Search for Endpoint Read More »
This will be creating and deleting a dACL. Again, details can be found in the built-in ISE documentation. The Postman headers are the same as in the previous GET. Create The only changes here are; POST method and to add the dACL that will be sent with a name and description.A 201 response code will
ISE Lab: API 3 – Create & Delete dACLs Read More »
Now that the API has been configured, it can be tested. In this post, I will show a few base GET requests that can be made to ISE in Postman.There is a lot of documentation built into ISE to view which gives examples on the types of calls and examples of calls and returned output.https://172.17.5.101:9060/ers/sdk#_
ISE Lab: API 2 – First API GET Requests with Postman Read More »